Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialoCheck if you run itEPSS 0.14%Mar 11, 2026
- Medium6.9Outlook Password Recovery 2.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload.Check if you run itEPSS 0.14%Mar 11, 2026
- Medium6.9SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload.Check if you run itEPSS 0.14%Mar 11, 2026
- Medium6.9Easy MP3 Downloader 4.7.8.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long unlock code.Check if you run itEPSS 0.17%Mar 11, 2026
- High8.7IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiServer.exx endpoint.Check if you run itEPSS 0.34%Mar 11, 2026
- Critical9.3FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint.Check if you run itEPSS 1.03%Mar 11, 2026
- High8.7eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows attackers with minimal privileges to retrieve sensitive user data by exploiting the wCheck if you run itEPSS 0.44%Mar 11, 2026
- Medium6.9Folder Lock 7.7.9 contains a buffer overflow vulnerability in the serial number registration field that allows local attackers to crash the application by submitting an oversized pCheck if you run itEPSS 0.14%Mar 11, 2026
- Critical9.3NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious parametersCheck if you run itEPSS 0.86%Mar 11, 2026
- High8.6Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphCheck if you run itEPSS 0.12%Mar 11, 2026
- High8.6Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by creating a maCheck if you run itEPSS 0.17%Mar 11, 2026
- High8.7Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listinCheck if you run itEPSS 0.57%Mar 11, 2026
- Medium6.7InputMapper 1.6.10 contains a buffer overflow vulnerability in the username field that allows local attackers to crash the application by entering an excessively long string.Check if you run itEPSS 0.21%Mar 11, 2026
- Medium6.9SpotIE Internet Explorer Password Recovery 2.9.5 contains a denial of service vulnerability in the registration key input field that allows local attackers to crash the applicationCheck if you run itEPSS 0.15%Mar 11, 2026
- Critical9.3Epross AVCON6 systems management platform contains an object-graph navigation language (OGNL) injection vulnerability that allows unauthenticated attackers to execute arbitrary comCheck if you run itEPSS 0.45%Mar 11, 2026
- Medium5.4Notesnook is a note-taking app focused on user privacy & ease of use.Check if you run itEPSS 0.21%Mar 11, 2026
- Critical9.8Taskosaur is an open source project management platform with conversational AI for task execution in-app.Check if you run itEPSS 0.73%Mar 11, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.55%Mar 11, 2026
- Medium5.7An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggering live termiCheck if you run itEPSS 0.18%Mar 11, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.42%Mar 11, 2026
- Medium4.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator to disable the agent.Check if you run itEPSS 0.15%Mar 11, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.47%Mar 11, 2026
- High7.5cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.52%Mar 11, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.29%Mar 11, 2026
- Medium6.3Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.32%Mar 11, 2026
Sort